Advisories · Weakness
Broken access control.
Missing or wrong authorization checks, IDOR, loose permissions. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 4.3 Medium
SmartLinker AI - Moderately critical - Information disclosure - SA-CONTRIB-2026-210
- Drupal SmartLinker AI
- Broken access control
- CVSS 3.7 Low
Easy Breadcrumb - Moderately critical - Information disclosure - SA-CONTRIB-2026-212
- Drupal Easy Breadcrumb
- Broken access control
- CVSS 7.3 High
Restrict route by IP - Critical - Access bypass - SA-CONTRIB-2026-216
- Drupal Restrict route by IP
- Broken access control
- CVSS 5.3 Medium
Dopup - Critical - Information disclosure - SA-CONTRIB-2026-227
- Drupal Dopup
- Broken access control
- CVSS 5.3 Medium
Ágora Transparency Theme - Moderately critical - Information disclosure - SA-CONTRIB-2026-231
- Drupal Ágora Transparency Theme
- Broken access control
- CVSS 5.3 Medium
Swiper formatter - Moderately critical - Information disclosure - SA-CONTRIB-2026-233
- Drupal Swiper formatter
- Broken access control
- CVSS 5.3 Medium
View Unpublished - Moderately critical - Access bypass - SA-CONTRIB-2026-235
- Drupal View Unpublished
- Broken access control
- CVSS 6.3 Medium
Domain - Moderately critical - Access bypass - SA-CONTRIB-2026-238
- Drupal Domain
- Broken access control
-
Simple User Management - Moderately critical - Access bypass - SA-CONTRIB-2026-239
- Drupal Simple User Management
- Broken access control
- CVSS 5.4 Medium
Frontend Editing - Less critical - Access bypass - SA-CONTRIB-2026-241
- Drupal Frontend Editing
- Broken access control
- CVSS 5.4 Medium
Media Bulk Upload - Moderately critical - Access bypass - SA-CONTRIB-2026-243
- Drupal Media Bulk Upload
- Broken access control
- CVSS 5.4 Medium
Fullcalendar View - Moderately critical - Access bypass - SA-CONTRIB-2026-244
- Drupal Fullcalendar View
- Broken access control
- CVSS 3.7 Low
TinyPNG - Moderately critical - Information disclosure - SA-CONTRIB-2026-246
- Drupal TinyPNG
- Broken access control
- CVSS 4.3 Medium
AI File to Text - Moderately critical - Access bypass - SA-CONTRIB-2026-251
- Drupal AI File to Text
- Broken access control
- CVSS 6.5 Medium
Rabbit Hole - Moderately critical - Access Bypass - SA-CONTRIB-2026-252
- Drupal Rabbit Hole
- Broken access control
- CVSS 8.8 High
Monster Menus - Critical - PHP object injection - SA-CONTRIB-2026-253
- Drupal Monster Menus
- Broken access control
- CVSS 6.5 Medium
Commerce Core - Highly critical - Access bypass - SA-CONTRIB-2026-254
- Drupal Commerce Core
- Broken access control
- CVSS 5.3 Medium
Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-255
- Drupal Commerce Core
- Broken access control
- CVSS 4.3 Medium
Commerce Core - Less critical - Access bypass - SA-CONTRIB-2026-256
- Drupal Commerce Core
- Broken access control
- CVSS 2.7 Low
Commerce Core - Moderately critical - Access bypass - SA-CONTRIB-2026-257
- Drupal Commerce Core
- Broken access control
- CVSS 6.3 Medium
Commerce License - Moderately critical - Access bypass - SA-CONTRIB-2026-260
- Drupal Commerce License
- Broken access control
- CVSS 6.5 Medium
Commerce Shipping - Moderately critical - Access bypass - SA-CONTRIB-2026-261
- Drupal Commerce Shipping
- Broken access control
- CVSS 2.7 Low
Commerce Shipping - Less critical - Access bypass - SA-CONTRIB-2026-262
- Drupal Commerce Shipping
- Broken access control
- CVSS 3.7 Low
AI (Artificial Intelligence) - Moderately critical - Information disclosure - SA-CONTRIB-2026-268
- Drupal AI (Artificial Intelligence)
- Broken access control
- CVSS 5.4 Medium
Fasttoggle - Moderately critical - Access bypass - SA-CONTRIB-2026-282
- Drupal Fasttoggle
- Broken access control
- CVSS 5.6 Medium
S3 File System - Moderately critical - Access bypass - SA-CONTRIB-2026-279
- Drupal S3 File System
- Broken access control
- CVSS 4.7 Medium
Bulk Update User Roles - Moderately critical - Incorrect authorization - SA-CONTRIB-2026-280
- Drupal Bulk Update User Roles
- Broken access control
- CVSS 5.3 Medium
Field Permissions - Moderately critical - Access bypass - SA-CONTRIB-2026-288
- Drupal Field Permissions
- Broken access control
- CVSS 5.3 Medium
Field Permissions - Moderately critical - Access bypass - SA-CONTRIB-2026-289
- Drupal Field Permissions
- Broken access control
- CVSS 4.8 Medium
OAuth2 Token Manager - Critical - Access bypass - SA-CONTRIB-2026-290
- Drupal OAuth2 Token Manager
- Broken access control
- CVSS 3.3 Low
Improper authorization in Apple Xcode
- Apple Xcode
- Broken access control
- CVSS 4.3 Medium
Keycloak-services: keycloak-services: authorization bypass via uma resource registration idor
- Red Hat Build of Keycloak
- Red Hat Single Sign-On 7
- Broken access control
- CVSS 4.3 Medium
Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
- CVSS 8.8 High
Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
- CVSS 8.8 High
Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
- CVSS 8.8 High
Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
- CVSS 8.8 High
Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
- CVSS 8.8 High
Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
- CVSS 6.5 Medium
Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::checkResult method.
- Broken access control
- CVSS 9.0 CriticalCritical · CVSS 9+
SOCFortress CoPilot: Stored case-report template injection permits backend code execution
- socfortress CoPilot
- Code injection
- Broken access control
- CVSS 8.1 High
WeGIA: Systemic IDOR + Missing CSRF — extract($_REQUEST) in All Controle Classes
- LabRedesCefetRJ WeGIA
- Cross-site request forgery (CSRF)
- Broken access control
- CVSS 6.0 Medium
Incorrect Authorization
- Tenable, Inc. Plugin Feed
- Broken access control
- CVSS 7.5 High
Bricks Theme Broken Access Control via load_popup_content
- Bricks Theme
- Broken access control
- CVSS 9.4 CriticalCritical · CVSS 9+
Sandbox Escape via Table Rotation in ServiceNow AI Platform
- ServiceNow AI Platform
- Broken access control
- CVSS 5.3 Medium
Domain Separation Bypass in ServiceNow AI Platform
- ServiceNow AI Platform
- Broken access control
- CVSS 6.7 Medium
Improper access control in Ubiquiti Inc WiFiman Desktop for macOS
- Ubiquiti Inc WiFiman Desktop for macOS
- Broken access control
- CVSS 4.3 Medium
Nomad vulnerable to cross-namespace information disclosure in multiple endpoints
- HashiCorp Nomad
- HashiCorp Nomad Enterprise
- Broken access control
- CVSS 6.9 Medium
Vite: `server.fs.deny` bypassed with queries
- Broken access control
- CWE-180
>=6.4.4, <6.4.5 · fixed in 6.4.5
GHSA-8g5g-mxqh-grgj · CVE-2026-118662 - CVSS 7.6 High
Shopify App: Token exchange shop context confusion may allow cross-shop authorization bypass in affected apps
- Broken access control
>=22.1.0, <23.0.3 · fixed in 23.0.3
GHSA-6j52-38f8-qhxr · CVE-2026-63414 - CVSS 7.3 High
cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials
- Broken access control
>=1.18.0, <1.19.6 || >=1.20.0-alpha.0, <1.20.3 · fixed in 1.19.6, 1.20.3
GHSA-8rvj-mm4h-c258 · CVE-2026-62290 - CVSS 4.6 Medium
Keycloak allows unauthorized access to resources via uma permission ticket bypass
- Broken access control
<26.6.4 · fixed in 26.6.4
GHSA-w3p3-7cjg-vgfw · CVE-2026-9799 - CVSS 8.4 High
Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes
- aws-privateca-issuer
- Broken access control
- CVSS 8.2 High
@eeacms/volto-chatbot has Unauthenticated Danswer API Confused Deputy Proxy
- Broken access control
<2.0.4 · fixed in 2.0.4
GHSA-w9x9-j56r-h98r - CVSS 6.5 Medium
Kubeflow Pipelines: Missing namespace authorization permits cross-tenant artifact reads
- kubeflow pipelines
- Broken access control
- CVSS 6.5 Medium
Broken Object Level Authorization in Users Configuration Endpoint (/centreon/api/latest/configuration/users) – Sensitive Information Disclosure
- Centreon
- Broken access control
- CVSS 5.4 Medium
Broken Function Level Authorization — `postcommand.php` allows execution of poller post-restart commands by non-admin users
- Centreon
- Broken access control
- CVSS 8.6 High
ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 Account Takeover via Device Authorization Approval
- zitadel
- Broken access control
- CVSS 8.1 High
Improper Access Control of Web Admin Console in Progress WS_FTP Server
- Progress Software WS_FTP Server
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
Privilege Escalation via Missing Authorization in WS_FTP Manager
- Progress Software WS_FTP Server
- Broken access control
- CVSS 6.5 Medium
WordPress Hotel Booking plugin <= 3.8 - Insecure Direct Object References (IDOR) vulnerability
- nicdark Hotel Booking
- Broken access control